Crypto tokens in addresses

"Christian Huitema" <huitema@windows.microsoft.com> Fri, 28 November 2003 22:02 UTC

Content-class: urn:content-classes:message
MIME-Version: 1.0
Content-Type: text/plain; charset="us-ascii"
Content-Transfer-Encoding: quoted-printable
Subject: Crypto tokens in addresses
Date: Fri, 28 Nov 2003 13:40:20 -0800
Message-ID: <DAC3FCB50E31C54987CD10797DA511BA065CA520@WIN-MSG-10.wingroup.windeploy.ntdev.microsoft.com>
Thread-Topic: Crypto tokens in addresses
Thread-Index: AcO1oaTESMQeaHKVT5aD1YoOxmxOowAVNsZA
From: Christian Huitema <huitema@windows.microsoft.com>
To: Iljitsch van Beijnum <iljitsch@muada.com>
Cc: ietf@ietf.org
Content-Transfer-Encoding: quoted-printable
Sender: owner-ietf@ietf.org
Precedence: bulk
Content-Transfer-Encoding: quoted-printable

> In the multi6 (multihoming in IPv6) working group, as one of many
> proposals, we've been looking at putting a 64 bit host identifier in
> the bottom 64 bits of an IPv6 address. If such a host identifier is
> crypto-based (ie, a hash of a public key) then it is possible to
> authenticate a host at any time regardless of where the host connects
> to the network at that particular time and without the need for a PKI
> or prior communication.

There is a very advanced proposal to do just that in the SEND working
group. You should check the drafts, and in particular the definition of
"Cryptographically Generated Addresses (CGA)":

	http://www.ietf.org/internet-drafts/draft-ietf-send-cga-02.txt

The purpose of SEND is "secure neighbor discovery", i.e. preventing such
things as ARP spoofing. 

-- Christian Huitema

Crypto tokens in addresses Christian Huitema